ILL IIFOmmTIOI COHTAIHED 
HERE II 15 UNCLASSIFIED 

DATE 07-06-2012 BY 60324/UC/baw/sab/aio 


U.S. Department of Justice 



In Reply, Please Refer to 
File No. 


Federal Bureau of Investigation 


550 Main Street, Room 9000 
Cincinnati, Ohio 45202 
November 3, 1998 


University of Texas at Austin 
Office of Telecommunication Services 
Services Building, Room 319 
Austin, TX 78712-1024 


RE: Notice to Preserve Evidence Under 

Title 18, U.S.C., 2703(f) 


Dear 


This letter is to follow up our telephone conversation 
on October 29, 1998. As I'stated at that time, I am a Special . 
Agent for the Federal Bureau of Investigation (FBI), a duly 
authorized federal law enforcement officer empowered to 
investigate unauthorized access into private, state, local and 
federal computer systems. As previously discussed, during the 
following date(s): September 22, 1998, an unknown individual 
illegally entered a state nwnpH anarlgmin -ing-m-n-Hnnal computer 


system at sumac.occ.uc.edu 
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investigation, this communicati on originated or pass ed through 
your system, net.cs.utexas.edu, 


] 


This letter serves to inform you that I will be 
pursuing the issuance of a subpoena and/or court order under 
Title 18, U.S.C., 2703(d), respectively, to trace the unknown 
individual back from your system. Inasmuch that this process can 
be time consuming, I have requested, pursuant to Title 18, 

U.S.C., 2703(f), that you take appropriate measures to preserve 
transactional logs, contents of any relevant communications, 
back-up files, and any other evidence that pertains to the 
aforementioned connections. . ^ <s> ■e's .7- ' 


provides: 


For ease of reference, Title 18, U.S.C. 


(f) Requirement to preserve evidence. 


, 2703(f), 
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(1) In general.- A provider of a wire of-" 
electronic communication service or a remote computing service, 
upon the request of a government entity, shall take all necessary 
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steps to preserve records and other evidence in its possessipn 
pending the issuance of a court order or other process. 

(2) Period of retention.- Records referred to in 
paragraph (1) shall be retained for a period of 90 days, which 
shall be extended for an additional 90 day period upon a renewal 
request by the governmental entity. 

Finally, although you have been most cooperative, we 
have in other situations, experienced some informational leaks. 
While such leaks may represent misplaced good intentions, they 
can have serious impact upon our investigation. Accordingly, we 
would respectfully request that your personnel be placed on 
notice that they are subject to criminal liability should they 
disclose any privileged information. The governing statute in 
this regard is Title 18, U.S.C., 2232(b), which provides: 

(b) Notice of Search.- Whoever, having knowledge that 
any person authorized to make searches and seizures has been 
authorized or is otherwise likely to make a search or seizure, in 
order to prevent the authorized seizing or securing of any 
person, goods, wares, merchandise, or other property, gives 
notice or attempts to give notice of the possible search and 
seizure to any person, shall be fined under this title or 
imprisoned not more than five years, or both. 

Again, I greatly appreciate your cooperation in this 
matter with our agency. T f vou have anv questions o r comments, 
Please feel free to call SA at 


Sincerely yours, 

Sheri A. Farrar 
Special Agent in Charge 


By, 


Supervisory Special Agent 



